eb5b8cc4330a1c755f84283150ecd6f42fdf454054e5c00037599b5b24b25336 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb5b8cc4330a1c755f84283150ecd6f42fdf454054e5c00037599b5b24b25336
Size

812KB
MD5

201408e60c8cd09ef79b3de9ff53e9d6
SHA1

75fe2320d824ceb7e1ac292828140221fcd8e525
SHA256

eb5b8cc4330a1c755f84283150ecd6f42fdf454054e5c00037599b5b24b25336
SHA512

fc64eb6bbfb8147aae4dddd1cb0101d4e7ee10346b1c0805f5b568690a3d3784688b608ed1b85e6db17ce29a0d40a0b4389c2d9ce9b5c3d4f25b26154d88c11e
SSDEEP

24576:CpOKTNDuOb4Y7ZTqCBgdGIXFKcgLB37jvax:COKTNDuOMYVWCBgdVXUcc5Cx

Score

N/A

Malware Config

Signatures

Files

eb5b8cc4330a1c755f84283150ecd6f42fdf454054e5c00037599b5b24b25336
.exe windows x86

5331d5b7be6f72a16574d84fc98ac0ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
GetPrivateProfileIntW
GetCurrentProcess
FoldStringA
lstrcpyA
SetCurrentDirectoryA
CreateMutexW
GetVolumePathNameW
SetVolumeLabelA
GetStringTypeA
GetShortPathNameW
SetEnvironmentVariableA
HeapCreate
SetStdHandle
LoadLibraryA
DeleteFileA
EnterCriticalSection
LeaveCriticalSection
GetTickCount

aaclient

LoadClientAdapter
OpenKeyReaderWriter
OpenKeyReader
g_fnStartTransport

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 801KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ